Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QNlfrSzEvnHZgm8PH_4i9n8gl0k.roa
File:                     QNlfrSzEvnHZgm8PH_4i9n8gl0k.roa (raw, json)
Hash identifier:          /POQAkZnpJV9O56KdOmaFxAKz2ciKyjZ4n74I9bnP5Q=
Subject key identifier:   40:D9:5F:AD:2C:C4:BE:71:D9:82:6F:0F:1F:FE:22:F6:7F:20:97:49
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0173
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QNlfrSzEvnHZgm8PH_4i9n8gl0k.roa
Signing time:             Tue 31 Mar 2026 07:53:27 +0000
ROA not before:           Tue 31 Mar 2026 07:53:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=40D95FAD2CC4BE71D9826F0F1FFE22F67F209749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:60:d6:ff:c6:ca:60:ed:e1:a7:41:b2:33:
                    6b:3e:a8:f4:95:58:fe:5e:72:e5:fe:16:f3:0b:93:
                    39:3a:7c:a0:31:dd:f6:b9:84:0d:5f:85:7c:38:df:
                    7c:87:43:83:fe:01:7f:76:48:99:e6:02:67:6e:77:
                    0c:4f:27:7d:f7:9d:09:3f:91:06:47:39:37:57:49:
                    cd:e5:cb:99:9f:f8:ee:b3:3b:79:54:74:3c:ac:ed:
                    6a:db:7c:c8:fa:9d:4b:0d:34:2c:30:21:ca:54:ad:
                    0c:30:bd:35:36:73:93:9f:5f:1b:c7:05:b7:73:6b:
                    08:d7:23:de:b6:bc:06:5b:06:46:3d:81:ad:ef:f2:
                    dd:17:fa:e4:4e:b1:4a:29:bf:37:1f:d6:fd:4a:34:
                    00:a1:eb:db:2a:01:ba:a5:03:3a:f6:89:ea:1f:a1:
                    66:e1:0a:83:16:c9:77:69:b3:dd:33:20:32:8d:72:
                    cd:a5:97:53:2a:a7:a8:bf:80:9c:44:6f:b2:a5:96:
                    c7:69:bb:31:81:d3:9a:99:37:47:d1:32:04:64:fe:
                    e0:bb:c3:21:55:53:32:c1:cd:f6:31:27:a7:3c:14:
                    80:ee:3b:16:04:21:10:73:a0:c1:cb:0b:b2:91:32:
                    e5:3e:72:1d:e1:aa:2e:e9:b7:21:d5:9a:be:b4:8b:
                    5b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D9:5F:AD:2C:C4:BE:71:D9:82:6F:0F:1F:FE:22:F6:7F:20:97:49
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/QNlfrSzEvnHZgm8PH_4i9n8gl0k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         af:32:c4:19:01:7c:d8:69:e6:c3:55:c2:e2:56:f8:4e:2f:1a:
         74:96:49:36:0d:af:bd:6e:34:19:e3:4c:c5:7b:14:21:96:d5:
         9b:58:8e:70:ef:77:23:74:b6:e5:f0:d1:96:69:5f:5e:e5:c2:
         a7:00:cc:92:84:90:c1:3e:fd:76:e8:c2:43:d5:bc:6d:ef:0f:
         cd:77:f3:06:6a:77:d8:6a:4b:a1:01:c7:93:75:fd:4a:b2:64:
         9d:11:76:f0:cf:81:f9:31:9b:73:be:7e:29:d1:ab:83:7e:75:
         d2:91:6a:a3:4c:31:86:14:78:ec:28:9e:18:46:c5:88:4a:27:
         77:45:a9:9d:4d:09:42:10:fb:41:c8:6d:35:40:80:84:83:80:
         3e:78:e8:6f:d5:83:91:c2:7a:94:dd:49:49:00:d9:ea:8a:b0:
         f4:a7:2c:85:e6:9c:c6:09:39:a4:f7:95:85:33:21:2e:28:d4:
         ea:f3:66:6f:49:d6:ff:9c:59:91:fe:cc:e5:eb:1c:e9:9d:be:
         24:f2:ef:28:b5:58:45:06:c7:23:5e:49:5b:e3:33:c0:9e:e2:
         b2:f7:53:b7:9c:ec:b5:93:bb:f7:01:21:7f:0a:6b:60:48:cf:
         13:a7:d1:f4:b3:d2:fd:b0:da:ac:27:a8:a0:13:70:53:e1:0f:
         90:81:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:01:48 2026 by rpki-client